Information Security Policy

CHINO Corporation (hereinafter referred to as "our company") has established the "Information Security Policy" (hereinafter referred to as "this Policy") as the basic policy for our efforts regarding information security in order to constantly gain the trust of not only our customers and business partners, but also society as a whole, and will comply with this "Policy" as well as the separate "Personal Information Handling" (hereinafter referred to as "Privacy Policy").

I. Application and Scope

The "information assets" covered by this Policy include all information obtained or learned in the course of our business activities, as well as all information held by our company for business purposes.
All of our officers and employees involved in the handling and management of our Information Assets, as well as our business partners and their employees who handle our Information Assets, will comply with this Policy and the Privacy Policy.

II. Management System

Our company's information security management department will protect and appropriately manage our "information assets."
Additionally, by appointing an information management officer in each organization, we will promptly implement information security measures.
Through these measures, we will accurately grasp the information security situation throughout the company and take proactive measures to swiftly implement necessary measures.

III. Compliance with Laws and Regulations and Internal Regulations

We will establish regulations based on the relevant laws, this policy, and the privacy policy, and will thoroughly enforce compliance within the company. In addition to applying penalties to violations, we will prevent accidents by notifying employees in advance.

IV. Implementation of measures

In order to prevent accidents such as unauthorized intrusion, leakage, falsification, loss, destruction, and interference with the use of "information assets," the Company will implement appropriate organizational, physical, technical, personnel, and other safety management measures.
We also aim to improve the reliability of our company by implementing business continuity measures and disaster recovery measures to fundamentally support information security.

V. Education

We will continuously provide information security education and training to all directors, employees and related parties in order to improve their information security literacy and execution the appropriate management of "information assets."

VI. Management of business partners

When the Company outsources all or part of its business, it thoroughly examines the suitability of the outsourcing company and records in writing that the outsourcing company will maintain the same level of security as the Company. In addition, to confirm that the security level is being appropriately maintained, the Company will conduct regular audits and reviews of the outsourcing company.

VII. Audits and Continual Improvement

We will conduct internal information security audits on a regular and irregular basis as necessary to verify that laws, regulations, internal company rules, operating procedure, etc. related to information security are being complied with and are functioning effectively in the course of business operations.
We will maintain and continually improve information security by regularly evaluating and reviewing the above efforts.